X 1 he information can. be used To distinguish or truce no akoidoai's identity the.. it 
is linked or linkable to sped Ik individuals?. i f owever. this in tom-anon is only in 

11'you marked any of t he above- proceed Co Question 4, 

None of the above, i! none of the above, describe why the iniorntahon does not 

coasuhems- 


5. is mkrmahott about f kited States citizens or lawfully admitted pern tar tent resident 
aficna retrieved front the syatcrn/proioci by name or other persona! identifier? 

X NO, |ff on- skip to question 7,j 

Y b.S. iff yes- proceed to the nest rpreslimt,! 

6. Does the sestet n/prtnect collect any intbrunukn direetiy front tiro person who is the 

NO if f no- proceed fr> question. 

S'ifS 


assessment-? 

.NO 


.YSN Iff yes- proceed to question ??| 

b. Are subjects oi’inibnnation from vviiorn the information is direetiy collected 
provided a written Privacy Act POO ,s slate-nent feaher on the collection hum or via a 

.NO \r\ik program will need to work wit h PO..U to devdop/implemeni 

the necessary formtsfd 

Vi'S Identify any forms, paper or electronic- osed to retptest m«h 
information from the information sobjeet: 
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7, Are Social Seceasty Numbers (SoNs • collected. matotuined or disseminated Irons the 
syetem/nnpeu/ Full SSNs should only ho used os idenUbera in iironed instances. 



SSA.s ore important for other reasons. Describe: 

I he sysiesn/proicet provides special protection a- SSNs te.g.. SSNs arc 
encrypted, balden from all users sue a look-up table, so only available to certain 
users). Dysonhc:. 

It is not feasible for the system.-'project to provide special purcehun to 
SSNs. I'isploin: 

X No. 


Yes. mtormmion avstems oncrated bv com?a;.tors as- die rHI may he 
considered frit racy Act systems of records. The bederal Acquisition Regulation 
contains standard contract clauses duo must be included in the event the tty stem 
collects, maintains or riiasen thanes INI artd additional requirements may be 
imposed as a -natter of Department of Justice policy. Consultations with the 
Oilke of Ac General Counsel may be required if a contractor is operating the 

Security Division iSeci.YC 

A V "- 'X \ V V 

completion date: 

Provide date of last CA A eertd'leatlon/ro-eeetdktst.lon:: 

July h sOOS 
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i Availability; fUw Xbuleride _X High IkuMlned 


Nos applicable - do s system is only paper-based. 

Does - he system coiohua data unsung as dadoed in Section 804 of the 
impieoteming Recommendations of she OD I Commwsnm Ac? of 2007> if 
A?s codified at 42 I 'M ' aOitOee-dV: 



X YES If yes, is ah cate which of 0-a ioiiowem changes wete involved (mark all 
changes that apply, and pros aic brief explanation for each marked changed 


A a da a ee ?Voo; atiorntapon .in a format That is anonymous or non- 
idaroi.ik;.bie to a tormai that is idenh(tabic to partiesdat individuals. 

X A new rise os at- i t system/project, mektdhtg application of'a now 
technology, tied changes boss nuomumon m kiettti stable form ts managed. 
(For example, a change that weald create a more open envnonmera anchor 
avenue for exposure of data that previously did not exist.? However, this 
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change nth in' ret'hwted so wgiarafe f>vheu'> boeemeolo-mwo (Next Otn 

SOON?, 






A \ s s > \' of databases o o< in 

i dent A) able IfJVM IVt loon coonnerenb or public sources, 

v Os ' s \ s o \ s MMHI "• 

nc'V ' A; < \s in stood liable 

\i chance t dal; rose it s us a now a ses or disc 1 < ?sure of in ibrffiaf on i n 
identifiable tone. 

A chance that noodt; in now boons: of nnbrntatbsn m identifiable 
form being addedanno Ae ss ' v 

Ao 0 e Os ' O' ' ' U \ 

tiie nidi old aak on; whom records o maintained. or tire osc or 
dtsaoffitnadon o {*»$ " irons tiro ' Aern/pnbec:. 

. CAbor IFro'cdk brief explomrtboi|r 

v PI A tor this 0 s s sdready esdstf 

MO .VIA 
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(OGC/PCLU (Rev. 05/15/09) 

FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROjECT: Scattered Castles[~ 






Namej j 

Namej 1 

Sisson; 

Program Office: Information AssuranceTechnology 

Phone:^^^^^^^™ j 


Division: Security Division 

Phone| ] 



Room Number: SpyB-601 



FBI DIVISION INTERMEDIATE APPROVALS [complete as necessary consonant with Division policy] 



Program Manager: Security Division 

Division Privacy Officer: Security Division 

Program Division: Security 

Signature:/s 

Signature: /s 

Division 

Date signed: 

Date signed: 



Namej-1 


Title: Information Assurance Technology Unit Chief 

Title: Information AssuranceTechnology Unit Chief 

FBIHQDivision: 

Signature:/s 

Signature:/s 

Security Division 

Date signed: 

Date signed: 


Name: Michael F.A. Morehart 

Name: Michael F.A. Morehart 


Title: Deputy Assistant Director Security Division 

Title: Deputy Assistant Director Security Division 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338}. 

(Tilt Pfcf Privacy and Civil Liberties Officer’s determinations, conditions, and/or final approval will be recorded on the following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows! 

1 - Signed original tofile 190-HQ.-C1321794 (fwd to JEH 1B204 via PA-520) 


Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacy@usdoj.gov) 

(if classified, via hand deliveiy to 1331 Penn.Ave. NW, Suite 940,20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn | | 

1 - FBI SecD/AU (electronic copy: via e-mail to Uc j | kg 

1 - RMD/RMAU (attn j | b7C 

2 - Program Division POC/Privacy Officer 
2 - FBIHQDivision POC /Privacy Officer 


1 -OGC\PCLU intranet 
1 -PCLU UC 
1 -PCLU Library 
1 - PCLU Tickler 
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NAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will he completed by the FBI PCLU/PCLO folbv 
I A drafter should skip to the next page and continue.] 


_ PIA is required by the E-Government Act. 


_ PIA is to be completed as 


Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. 


i_ PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate Pll. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

X No significant privacy issues (or privacy issues are unchanged). SYSTEM IS INFRASTRUCTURE 
_Other (describe): 


Notify FBI RMD/RIDS per MIOG 190.2.3? _Nc 


_Yes (see sample EC on PCLU intranet website). 


SORN/SORN revision(s) required? 


se/add Privacy Act (e)(3) st 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. The system may contain Federal 
records whether or not it contains Privacy Act requests and, in any event, a records schedule approved by the National Archives and Records Administration 
is necessary. RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary 
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Date Signed: /s/ David C 


INFORMATION ABOUT THE SYSTEM / PROJECT 

Provide a general description of the system or project that includes: name of the system/project, including associated 

nyms;structure of the system/project, purpose; nature of the information in the system and how it will be used; who will have 
ss to the information in the system and the manner of transmission to al users. (This kind of information may be available in 
ystem Security Plan, if available, or from a Concept of Operations document, and can be cut and pasted here.): 



Scattered Castles (SC) is an Intelligence Community (1C) security clearance application hosted on theTS/SCI Joint Worldwid 
:e Communications System (JWICS). To track clearance and access information for Bureau personnel, the FBI I 
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Thus no Pll remains on the SC | f 


esstoScIZZI Only privileged users with TS/SCI clearances will have log-c 


rt, or disseminate any information about Individuals iri identifiable form, 
hich is the definition of personally identifiable information (PM))? 


The PTA is now complete and after division approval (s) should be: 
oval. Unless you are otherwise advised, no PI A is required.] S ! 


n or disseminate i'll as contemplates by the Privacy Act. 


I"EM IS INFRASTRUCTURE ONLY. THE FOLLOWING QL 
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FBI PTA: Scattered Castles ) | b7E 

4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by 
name or other personal identifier? 

_NO. _YES. 

5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/p reject? 

.NO. .YES. Ifyes, check all that apply: 

.SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 

_SSNs are important for other reasons. Describe: 

.The system/project provides special protection to SSNs (e.g.,SSNs are encrypted, hidden from all users via a a 

look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project: to provide special protection to SSNs. Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the information? 

.NO. [If no, proceed to question 7.f 

_.YES. 

a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

.YES. [Ifyes, proceed to question 7.] 

NO. 


b. Are subjects of information from whom the information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the col lection form or via a separate notice)? 

.NO. [The program will need to work with PCLU to develop/impiernent the necessary form(s). j 

.YES. identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (Sect))? 

_ NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: 
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FBI PTA: Scattered Castles^ 


b7E 


. YES. if ves, provide date of last C&A certification/re-certification: 


_Don't Know. 

Is this system/project the subject of an QM 6-300 budget submission? 


.YES. if yes, please provide the date and name or 

title of the O.M8 submission; 


Is this a national security system (as determined by the SecD)? 


.NO. 


YES. 


Don't know. 


Status of System/ Project: 

This is a new system/ project in development. [If you checked this block, STOP. The PTA is now complete 
and after division approval(s) should be submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required .] 


if. EXISTING SYSTEMS/ PROjECTS 
1. When was the system/project developed? 


2. Has the systern/proiect undergone any significant changes since April 17, 2003? 
_ NO. [if no,, proceed to next question (i|.3)J 


YES. If yes, indicate which of the following changes were involved (mark all boxes that apply): 

_ A conversion from [taper- based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiahle to a format that is identifiable to 

particular individuals. 

_ A new use of an IT system/project, including application of a new technology, that changes how information 

in identifiable form is managed. (For example, a change thatwould create a more open environment 

and/or avenue for exposure of data that: previously did not exist.) 

_ A new method of authenticating the use of arid access to information in identifiable form by members of the 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 
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FBI PTA: Scattered Castles[ 


UNCLASSIFIED // FOR OFFICIAL USE ONLY 


] b7E 

A change that results in a new use or disclosure of infor mation in identifiable form. 

A change that results in new Items of information in identifiable form being added into the system/pro reel. 

Changes do not Involve a change iri the type of records maintained, the individuals on whom records are 
maintained, or the use or dissemination of information from the systern/project. 

Other. [Provide brief explanation]: 


3. Does a Pi A for this system/project already exist? 


NO._YES. If yes: 


a. Provide date/title of the P!A: 


b. Has the systern/project undergone ally significant changes since the PiA? .NO. ^ YES. 

[The PTA is now complete and after division approval(s) should be submitted to FBI QGC/PCLU for final FBI approval and 
determination if PiA and/or other actions are required ,] 
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FBI DIVISION INTERMEDIATE APPROVALS 


\4 Asks y.\'; u\ aAcs ayyyy'-s yYv 

y\c\ .A;'.0 A-, i>»..M>..?.'1 ^trTFASi .i'-ii_. 



After »i\ iiivkma appeal#, forward hard mpy phis dmroik wpy fo FBI OOC/PC1..U iMM 73S#L 

^ \ ' S' ‘ v ' v S v. ' < v. ' v ' X S V ■!*'< 

foilowmg r-%v 5 
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A is no; repaired Ao -he (oboe n;g reason; >}: 

Syseon:; eyes usd ooisect. rnisimsu;.. or disseni Inale FIs. 


$vs;c:n is grandbnhered (in existence IxdVsx: AC o ; 20d;V no later changes posing .ngnb'ieon; privacy risks •. 
Inuxinadon la she system rcbnc.s ns hucrnai yoveoxrncrn operations. 

System has been previously assessed under an evaluation s;aohn as a HA. 

Ay sigobkan; privacy issues (or privacy -ssees are ear ha needs 



RECORDS, lire program should consuls, odd; RMf> so hlealify Aet-oivo any heders; restuds/eketronie records Issues. 

1 he system orsy contain. rederai records whebter or no; n. contours Fro ass Acs mqncOx and. In any everts. a records 
schedule approved by Use Rational Archives and Records Adrnuosnanon Is necessary. RMD oa=; prsonde advice or; bus 

























































proceed to qsmks>8 7J 



NO }The program will, amt to workwkh i*CLU in deve!i<f>/imf»teine«t 
ihz nactsmry formes}.} 


X ' . s Nk'SSkN UW tO*S>3v p4|K* O? ok\i*OSW\. SHM'd SO f^SSOv* voOs 

taformmios tram the information sobject: 
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Vex information systems operated by conlrncto.m for Use 11:5.1 may be 
considered Privacy A cl systems of records. The federal Acquisition Regulation 
contains standard contract douses that must bo included in the event the system 
collects, rnaintarns or dlsseunnates Pit and additional requirements mat be 
imposed as a matter of Department or Justice policy. Consultations oath the 
Office of the General Counsel may be teq aired if a contractor is operating the 
system for the I IP 

Has the system undergone Codification & Accreditation (CCA) by the FBI 
S ee o rlfy I b I v i a I on (8 ec D) 

NO If no, indkafe reason.; if CNfcA is pending, provide anticipated 
completion date 

X YES If yes, please indicate the fallowing, if known; 

Pres ide date of Inst C&A eertlReatlon/rewertlbeathm: 

August :V 2011 

Confidentiality:.tarn.Moderate _X.fI.igh Undefined 

Integrity: _Low m X Moderate High Undefined 

Availability: Low _X Moderate High Undefined 

X NO 

.YES If yes, please provide the date and name en¬ 
title of the 0MB submission: 

X NO 

.Y.11S I f yes, p !e as e des e rlhe t he d ata m min g fa ,nc t ion: 

















IMI.WmHO) 


12, '* tins j nut -oral scesroy \s v n us oemrmwed s we SoAl)' 

X NO .YES 

!3. Status of System/ Pmj ect: 

1'his is a new system/ project in development. 


IL EXIST!X€ S3 STEMS ER< Uh ClS 

1 When was the $} stem'project developed? March 26< 2fifi8 

2. Has the aystem/prptect undergone any significant changes since April !?. 2003? 

.. NO [If no, proceed to neat question (Of. j 


X YFS If yes. inchoate winch of the follow mg changes were invoked (mark all 
changes that apply, and provide brief explanation for each marked change) : 

A conversion front paper-based records to an electronic system, 

__ __ A change from information in a format that is anonv ntot.tr or non- 
identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/prqkef including application of a new 

u, iwh out <. 1 > tge v r cv\ inform afion ir ideal liable to r s * \ aaaa. ge< I 
t f or example. a change that would create a more open environment and or 
avenue tor exposure of data that previously did not exist > 

A change that results in information in identifiable form being 
merged, centralt/rd. or matched with other databases. 

_ A new- met hod of authenticating the use of and access to 

information in identifiable form by members of the public 

\ s> sremadc incorporation >n databases of information in 
denti . fie b o pu , rs sed o n uined 'root ce nmcrcial >r p th ic so roes 

; . A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

X_ A change but results ns a new use or disclosure of mformation in 

Identifiable form 


UXCLASEirOsi) 


epic.org 


EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2019 

















3L0 ANALYSIS (FI 














FINAL FBI APPROVAL / DETERMINATIONS f CONDITIONS: l?hht wxrtfo.it will be :«:M|>OtesI by tire Fill 
F€ CO/ FCiLO hdhnvfog F TA. wiibesfoskm, The FT A drafter afonahl. stem 1.Q foe tm fo rage And omi D feKt. f . 


X P! A is required by the FAjovemmen: Act. 

PI A. Is to be completed ss a matter of FBLDOi discretion 

Is PI A to be published on F 3 I.GOV folier any RMD POIA rcdactionsC .Yes. X.No > mduxde reason?: 

This is a national security system so h wilt not Iso published. 

FLA is not resource lot die follow-mg re a songs? 

System does sot collect, maintain, os disseminate Pib 

System is grandlkihered ( in exudence before 4 / 17 / 2003 ; no Inter changes peeing slgmtreaoi privacy risks). 
Information so tin; s> stem relates to internal government operations. 

System has been previously assessed under an evaluation similar to tt FI A. 

No sigm$k.a?a. privacy issues tor privacy issues are unchanged). 


A pp ticsbie $ ORN>;s •; Jy one 

Notify FBI FM DTI IDS per MiOG ) 900.3? .No .. X Yes-. See sample BC on PCI.G infowet svebsive here: 

ivOnsuiunste/IHIXTiGGA/TBiPCl..UdTnvacyCIvbfoDQf rhertfos%2lR,fora:y/form for sniog 190-2-3 ee.wnd 

V N N M \ \ V S X fo > ! 

'ML" >o go <> 'v ' \1 J ' ^ is ' 


prepareAcvtsefodd Privacy Act tcKG stateosents for related tonus? .No X.Yes {indicate tortus tblecoxN; 

FO- 33 X - this will need to be ?-e vised to indicate rhor rise informal ion may be used lor inielligeoee purposes and also 
may be shared with government agencies beyond mvt those responsible lot investigating or prosecuting a violation. 


RECORDS. I lx program should consult with PAID to idcnfilV/resob e any Federal recordefofeeh'omc records issues. 
The system may eon ism Federal records whether or not It contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Admlrnsfoillon Is necessary. AMD can provide advice on this 
as well as on compliance with requirements for Ele ctronic .Rccordkeemng Ce rti Bea t ion and aux oeeessarv ripostes. 
Other:. ' .. ~ " . ..".."'.".’.' 


David C Larson, Deputy Genera! Counsel 
FBI Privacy and Civil Liberties Officer 




Signature: 
Date Signed: 
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L INFORMATION ABOllT THE SYSTEM /PROJECT 


N Provide a general description of Tie system nr project that includes: name 
of the system/project, including associated acronyms: structure of sIte 
systetB/projecf. purpose; nature of the information in die system and how if will he 
used; who will have access to the tafnrma&m i.o the system and the manner of 
transmission to ail users 


2. Does tie system/proleci collect, maintain, or disseminata any infomiaitor; about 
individuals in. idem ill able form. i.e.. is inibrmanon linked to or linkable to spec die 
individuals f winch is the definition of personally identifiable information (Flidd 

.NO pf no. ST OF, The FT A is non |§|uple:te and a dor division approsaps) 

should l>e aobmitted to 1TP OGC/PCLE for final Fill approval loirs- voo are 
otherwise advised, no PlA is required.'! 

.X.YES | If yes, please continue. 1 
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iaa o... a asia mmor ae as ns vs: 


5 Does the system/project pertain only to government employees, contractors, or 
mwA or .- 

.X_NO .YES 


4. fen r o , vat l ;> ^ ''U.fe- „ u com , - . ' ndn v.J ,\, o\'" ,v ' -> S' 
aliens retrieved from the sys?eoApro;eot by name or other personal Kie.nul.kvS 

.NO X YES 


5. Are. Social Security Numbers tASAs; collected ma.lntk.ned or disseminated .from the 
systenvprodefe 

A() _X YES If yes, check ail that apply: 


\ t U t V Os s s 5 

witnesses or sources in this Urn enforcement or intelligence activity,. 

................. SSNs arc necessary to identify FBI personnel in this internal administrative 

system. 

.SSSs are important for other reasons. Describe: 

X ; he sysfem/projeet provides special protection to SANs (e.g., SANs are 
encrypted, hidden front At users via a look-up table, or only available to cerium 
users a. Describe: The 8XN will be masked so tlmi on A the hut four digits are 
visible. 

.it la urn. .feasible tor the syslenEpteject to provide special protection: to 

ss\^ EAplmo: 


6. f v ^ „ \ < n ti < v v m v < t 

sniye,.'.- ; the upo mfev. 

.AO iff no, proceed to quest-on 7 ,] 

.X.YES 


V XV L A AS IE EEIAAOT Alii NX 111 YE 
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X NO Don's know .Y ES If yes* please provide 

the dale and name or title of the 
OMB submission: 

9. Is this a notional security system (us determined by the SecDs? 

NO X_YES .. Dotfi know 


10, Status m System/ Preset!: 

m X This is a new system/ prefect m development. (If yon checked rids block, 
STOP. The PTA is now commas and almr (llvNmn opps'os clts} skocsld be 
submitted tes FBI OCA//PCLF for linol FBI approval cud tiaormimaum B 
PIN ood/or other actions me repsdredd 


IL EXISTING SYSTEMS / PROJECTS 

1 . When eves the systemqne|cc( developed' 9 

2. Has the system/proiieet nodergone any signs;leant changes since April 17. 2003? 

NO [If no., proceed to next question s lie).] 


YES ff yes. Indicate which of the following. changes were involved (mark all 
bsss.es that apply): 

A cosvvinNon isatm paper-based records, to an electronic sy siesta. 

A change from information in a fbsToat that is anonymous or non- 
identifiable to a format that is ! dead liable to particular individuals. 

A new use of an IT sysfem/project. including application of a new 
technology. that changes how information in identifiable form is managed. 
(For example, a change that would create a more ope si environsiient anchor 
w o- , o" x s , .> i f l v ' , one 5 

A change that results in snsorsnaihes in Identifiable torso being 
merged, centralized,, or matched with re her databases. 

A new method of authenticating the use of and access to 
information in idsoti liable form by soemhers of the public. 
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lorn; being added mfo the systentprojecn 

Changes do no; involve a change in the ty pe of records rnamrained, 
?be individuals on reborn records are mainlined, or the use or 
drsscToinadon of n;ibm;mion iron; !.ho systen;/project. 

Other [Provide brief ex pkm atknij: 

; FI!A for tins systeni/proleei already ebM? 


Provide date/titk of the PI A; 
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(OGC/PCLU (Rev, CM/0 i/201 t } 


FBI PRI VACY THRESHOLD ANALYSIS (PTA) 
*:nr! 

BIRR FBI U»«|«e Asset IB; 


NAME OF SYSTEM / FROJEO 

Be ^ ^ CV"A 


Derived Fnns; 

SYSTEM/PROJECT POC 

FBI OGC/FCLIJ FOC 

Classified Bvc 

Narae:| t 

Name: 

Reason: 

Program Office: SIOC 

Phone: 

| BedasGfy On; 

Division; C1RG 

Room Number: 


Phone:l S 

.Room N amber: 5370 



FBI DIVISION INTERMEDIATE APPROVALS 



Program .Manager (or other appropriate 
execute a,s t.h\ mmn.determines! 

Division Privacy Officer 

Program Division: 

[laser! division nnrnnl 

1 r. 

Signature 

Date signed: 

Named 1 

Title: Asst. S^jptf'Qypf 

Date signed: A // T /'EY: , > 1 1 

Name] 

Y ' v N .' N ^ ^ . V ^ 

FIMHQ Division: 

[insert division name! 

Signaturey^^^^^^ 

Date sig^df 

1 Name: Chmt^pfalrH. Combs 

Title: Section Chief 

Signature: '' 1 

Date signed: ] 

Name: \ 

\ Title: ! 


b6 

b7C 


After all divtsma approvals, forward signed hard copy plus cieetroafc copy to FBI OGC/PCLU (JEM 7350). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or fmai approval will be recorded on (he 
following page.) 
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&OPHiAT£ 


nternai government c 
nodes' an evaluation 


Information in 


nos Swam tCRtfi 


.MiDO !' 


Notify FBI RMO/RO.: 
bttp://home/IX)/(XK 


ier on not it cos.it 


any event 


t A a '0. t via ; MynaSuic 

Privacy anrijC lvil IJbcsiica Unit j Date Signed: 

'» \0 W' o N > ■, ^ y>' t .. v ' ' Ov < s \ v<? s , 'v. 

U w ; ; x o t«. N W '»'■ 
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insf.ivi ci.-\ssific'aiioa/controi. marking 

If APPROPRIATE 


| Access to the system is limited to 
ionnei only, who are granted rkkiwriie access, and occasionally to 
at an as-needed basis who?? authori zed by SIOC's senior leadership, 
osonnel h<n e aeeess lo| | 


No outside 


system/project collect, maintain, or disseminate any information ab 
i’i.e.. a human being or natural person, regardless of nationality}? 


..NO {if no, STOP. The FT A is now complete and after division appri 

should be submitted to FBI OGCYPCLt for final fill approval Unless you an 
otherwise advised, no Pi A is m.pdmij 


NSFRT ( LASSiFK'ATION CONTROL MARKINGS, 
If APPROPRIATE 
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|!\M ^iU \\MHt \!HnuiM'ROi M \RKIM»S 

IF AFFROFREkTEi 
X YES I'll' yes, please eo»tin«e.| 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an indlv (dual. 

(Check all that apply.) 

_X_The information directly identities specific individuals. 

.X The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

v v ! o 'i .OtK "'O v 1 1' >v s mn - » et ..n 'no du' v folffH s 
is linked or linkable to specific individuals). 

If yon marked any of the above, proceed to Question 4, 

None of the above. If none of the above, describe why the information does not 
identify speci fic individuals either directly or indirectly. (If yon cheeked this item, 

S TOP here after providing the requested description,] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_X_NO .YES 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

.NO. (If no, skip to question 7,f 

.X.YES. pi yes, proceed to the nest question.! 

< K 1 ^ V v v < 5 ^ \ i , 

subject of the information? 

.. X.NO [If no, proceed to question 7,j 

.YES 


a. Does the system/projeet support criminal, C'T, or F'CI investigations or 
assessments? 

..NO 


IAMB <1 \H0NU»\ KOI 

1F A PFROFRI ATE] 
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|INSERT CLASS! Ef CAT ION/CONTROL MARKINGS. 

o- appropriate) 


X YES f If yes, proceed to question 7»| 

fe. Are subjects of information from whom the information is directly collected 
pro vided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

NO (The program will steed to work with PCLU to develop/implemcnt 
the necessary fnrm(sYj 

YES Identify any forms, paper or electronic, used to request such 
information from the Information subject; 

?. Are Social Security Numbers (SSNs) collected, maintained, or disseminated from the 
'\,v -< , Cv X sA, <m i <. i\ x,wo s >Lr i,,., 1 * race ^ \e\ 

NO X YES If yes, check all that apply: 


X SSNs are necessary to establish/confirm the Identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 

SSNs will only he entered mm the 1 Iwhen necessary to 

b3 

b7E 


SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

.SSNs are important for other reasons.. Describe: 

_X_The system/projeci provides special protection to SSNs (e,g., SSNs arc 

encrypted, hidden from all users via a look-up table, or only available to certain 
users}. 

SSN data w ill only be made available in SIOC staff authorized to access b3 

I I b7E 

It is not feasible for the system/project to provide special protection to 
SSNs, Explain: 

8. Is the system operated by a contractor? 

.X.No. 


i [INSERT c: lassification/coni roi. ; Y1A If kin ns, 
IF APPROPRIATE) 


epic.org 


EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2146 











UNSERT ClAS&mCATlONfCam'KQL MARKINGS, 

tt'Amumuxmi 

Yes. Information systems operated by contractors tor the FBI .may he 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that .must be included In the event the system 
collects, maintains or disseminates Pi! and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required If a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

X_ NO If no, indicate reason; if C'&A is pending, provide anticipated 

completion dale: 


b3 

b7E 


L YES Ilyas, please Indicate the following, if known; 

Provide date of last C&A eerrifkatum/re-eertificatloao 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity; Low Moderate High Undefined 

Availability; _Low Moderate High Undefined 

i .Not applicable - this system is only paper-based. 


H). Does the system conduct data •mining as defined in Section. $04 of the 

Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3f? 

X.NO 


.YES If yes, please describe the data mining function; 

11. Is this a national security system (as determined by the SecD}? 

,fL NO X YES 

12. Status of System/ Project: 


{INSERT C.1.,ASSIFiCATK^/CONTRC>.L MARKINGS, 
IF APPROPRIATE! 


| |is to he rev iewed by Seel) for potential 

operaiion as part of lira ] | Seci> review mui approval will 

ire documented through EC as receiving an Approval for Use (AFC). 
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{INSERT O .ASM FI C : ATfON/CONTROL MARKINGS, 

IF APPROPRIATE! 

This is a new system/protect' in development. | IT yen cheeked lids block, 
STOP. The FT A Is now complete sad after division approvafts) should be 
submitted to FBI OGC/PCLl! for final FBI approval and deierminatioo If 
FI A and/or other actions are required,! 


0. EXISTING SYSTEMS / PROJECTS 
I. When was the system/project developed? 


b3 

b7E 


2. Has the system/project undergone any significant changes since April.!?, 200a? 
X NO [If no. proceed to next question (II.3U 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system, 

A change from information in a format that is anonymous or non- 
identifiable to a format that is Identifiable to particular individuals. 

.. A new use of an IT sysfom/prqleei, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that, previously did not exist ,) 

A change that results in information in identifiable form being 
o _,c -.on a .o \~v x\i wd< ,v\ ecu i-o 

A new method of authenticating the use of and access to 
i Ov> ' u ~ oe I, Eerw ,osr " r ^' v - o’ * ,\ > 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained -from commercial or public sources. 

A new interagency use or shared agency function that results in 
new uses or exchanges of information in identifiable form. 


JAM RTCI \SME!< VnON/CXmROl MARKINGS 
IFAFFROFRIATF] 
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(INSERT EEASSIIACATION/CONTEOL MARKINES, 

IF APPROPRIATE! 

A change that results m & new use or disclosure of information in 
identifiable tens. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

Changes do not involve a change in the type of records maintained, 
the nui". uAsaA on whom meowE a e m . nnnoej. n the two or 
dissemination of information from the system/project. 

Other (Provide brief explanation!: 

1 Does a PSA for this systera/prpject already exist? 

..X.NO .YES 

A PTA was prepared for this application on July 11, 2008. 

If yes: 

a. Provide date/title of the PI At 

b. Has the system/proiect undergone any significant changes since the PIA? 

.NO .YES 

(The PTA is now complete and after division approval(s) should be submitted to 
FBI OGC/PCLli for final FBI approval and determination if PIA and/or other 
actions arc required.! 


|INFICR Y ELATE LICATJON/CONTROL MARKINGS, 
INAPPROPRIATE} 
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f UN Cl. AS S s Ff ICI> | 

FBI PRIVACY THRE SHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 

For efficiency, a system owner or proeram manager can be aided in making the determination of whether 

"y O v \\\v \ V \ 0 v. v, ' W O" v v ' V v NV WSv\ n 'OnSno v' NSX 

(FTA), 

Whet&er or sitn a PIA is required, the spsfom owner/pmgr&m manager should consult with the FBI 
Records Management Division (RMD) to Identify and resolve any records Issues relating to information In 
the system, 

A FT A contains basic questions about the nature of the system in addition to a. basic system description, 

The questions are as follows: 

A, trowel Down 0-sv.wpimn N ' m e ' < 

1. Type of information in the system: 

explanation of the quantity and type of employee/eontraotor information: 

v ' W s \\ v o S \ ' v v O \ 

Crime" link found on the FBI public websi te, www.fbi.gov. In addition to collecting foe information 

provided by the individual submitting a. tip] 1 b7E 


ollecting the information and how it will be used: 


1 he iutfomnU'W coiiw ted is uvenwhed end an foced tv' dewrome whet ho* a i 

V ' VI v v O' ' ' 'v ' v\ ' V 


3. The system’s structure (including components/subsj 


•©levant to the FBI 


4. Means of accessing the system and transmitting information to and from the 


5. Who within FBI will Inc 
that only authorized persons can as 


iss to the .information in the system and controls for ens 
v mfo'waws' 


v v W vs v ' V V s V V s N M s y ^ 

information stored in the system. The Unit Chief approves ail new accounts. | 

, V s s s V 


UfoDLAFSiA 


FBI 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSi r.M / PROJEC T: | | b7E 

MKH FBI Unique Asscd ID; . _ _ _._ ; 


: Derived f- niiir 
i CAvMicd By. 


; i*5> ; »Svi:\ U-j: 


I SYSTEMyfROJEC T PQC 


D i D V M . <. >\ ’t k JKC 


FBI OGC/PCLU PCX. 

Ns me 

Phone: 

Room Number: 


FBI DIV IS ION i\TERM ED! \ TE APP ROV ALS complete as necessary convyrnani wi th Dhision policy; 

■ Program Manager {or other appropriate \ Division Privacy 0lT;c§r 
j exee-mve as Division determines) 


: Psnf.a h |j;v AS." 1 
I : inset? mv;sson name] 


I Signature: 

1 Date signed: 
; Name: 
i Tid 


i tide: _._ / / 

S^marar F- —t" '* s rf~ 

I Date signed: ' * / , \ - ‘ 

j Name- Amy i... Pepper 


j Signature 
\ Date signed: 
I Name: ~ 

i ?; -jg-_ 

| SigTsarure 
I Dat< 


|N»d 

.-ty Seen, v 1 r - . .yguuys Se-' ::y.- 1 . e <up\ : 


Hunur 


After all division approvals. Forward signed tsnrd eopy plus electronic copy to FBI OOC/PCl U Hf H 73S0). 
\i v >. v. v tea Office c ^ n>st is. eondme s, a i i 1 n< ap, ava * bore >. kd.c r 
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L INFOKMATiON ABOUT THE SYSTEM / PROJECT 

K Provkk: s ginseng descripboo of tec system or project that isdodes: O) same of 
Use SYstem/ps'ojeeL owksUsssc ww^sed acrossyms; U>) Niruenm' of the 

OMO:5 OfOKeO UU'kfdmg iSH'f !.OO*'ROtO'WN >y*?h Other pf"0'C?S or nOSH'SOV W's 
On nn*. n > f n t ! v nn 

mat turn s? will be used; ios who will have access iu she Usfimmiihm in She 
syNioor isroieot; (I) sod She maswmr of mssssmsssiesf to all users, ( fids food of 









NO \lfmh skip to question ?„j 
X YT.S. i If yev proceed to the ocO qomsoo.] 



NO si! m», proem! fo i|«esiioo 7J 
X.YXS 





X NO 


V l:. X |ll ye $ v p roc ml i <> qu t% tkm 7>f 





NO O'hc program will omi to work with PCLC $o oevdopNospleoteo? 
I be orcrcsory ksr mXsk] FoOoc otteri; o Oi Oe pro coo od eXh the 



X N \ kh'iOiW tie l"i s!i\ fVpoj ot 000 *ook, n\>! to H'pOON MO'C 

ohouooss "0 tn>m tbo iosononhoo toshsod 



unclassified 
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CNCl.ASSIIll.D 


X NO _YES If yes, check all that apply: 

SSN^arc neec'SU'N f>'vXab, sb confirm the de-ttuy o, sohCv.\. v.vihi'S, 
wunisses of sources in this Urn enforcement or intelligence activity 

SSNsare necessary to dentifx l B1 persons el in this hue na Kimimsu r u> 


SSNs arc important for other reasons, Describe; 

he ssstent/projec provides special protect! stoSSNs i; SSN , 
one \ pted, it ode t It* m o'I users \ so t k A op tab e o? only available to cert on 
users). Describe; 

.It fe not feasible for the systemfprmecf to provide special protection to 

SSVt. Fs plate: 

Is the system operated by a contractor? 


.X.No. 

Yes. information systems operated by contractors lor the FBI may be 
considered Privacy Act systems of records. I he Pcdemi Acquisition Regulation 
contains standard contract clauses that must be included m the event the system 
collects, maintains or disseminates Ffl and additional requirements mas be 
nr aovd as a twite- ot Deoutrtn.m o v it sttee no soy Consultations u ;h the 
OiTtce of the General Counsel may be required i a contractor is operating the 
system tor the FBI. 

I las the sy stent undergone Cert if; eat I on & Accreditation tCA At by the b Bl 
Security Division (Sec Dy) 

X NO if no, indicate reason; if C&A is pending, provide anticipated 
eo tup let ton date: 

.YFS if yen, please indicate the iofioumg. if known; 


NOTE: The I lismt a .wstem? hut rather a teamsile that resides 

I ' , I 

muo -dual muanet sues do not go through iXCA 

.Provide date t>f last C&A certification re-eerf i fkation: Contact 
WXSC. ITSD 


b7E 


IM 1 AXSiriFf) 
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I \C I.ASSiFII.D 


CoMMeoihtiity:_Low,_Moderate High Lockheed 

i ntcgrsL: _Low Moderate High Undefined 

Availability: _Low Moderate High Uedefmed 

Not applicable ■■■ this system is only paper-based. 


; Nc ] \SSIFII t> 
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UNCLASSIFIED 

I C>. h this system/prqjeet the subject of an OM8-300 budget submission? 

X NO 

YES If yes, please provide She date and name or 

title of She 0MB submission: 

I i. Does i"e m Oeni v nJuet due numog as do lined m Sec S'on FU4 oft s. 

) r i"m mg Rvc. mote \x s o s if the u 5 ‘ t omi? s v' \>J i ’ > < - 

5o xodiUed ;u 42 CSC uUOOee-')? 

X NO 

YES it yes, please describe the data mining fttneiioo: 

12, Is this a national security system fas determined by the SecD}? 

.X. NO ..YES 

13. Status of System / Project: 

.\_ : > is a new system/ prosed. in deveiopment. |E ym cheeked this block, 

STQF, The FTA is mw complete and after division approvalfs) should be 
submitted to Hit OOC/PCIJ for final FBI approval and determination if 
Ha and/or other actions are repaired-] 


II. EXISTING SYSTEMS / FMMECTS 

1. When seas the > Yum orcue* developed? 

2. Has ? 'o \&te it project a vt gunv mv sk> t f< .mi changes s , ee Ypri P 1004 * 

NO | if no. proceed to next question (!!.3}.j 


YES if yes, indicate v. h ich of the following changes were In volt ed (mark ail 
eh a ages that apply, ami provide brief explanation for each marked change): 

... A conversion from paper-based records to art electronic system. 

A change from r Annas ion in a format that is anonymous or non. 
Identifiable to a format that is idealTable to particular individuals, 

A oevv use nfan IT systcm/project. including application of a new 
K\h'o’.op) tl\K\ _cs n\ sn * ea on m aicnufiahlo losm ss managed 


UNCLASSIFIED 
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